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DETAILED ACTION 
Response to Amendment 

1 . This office action is in response to the amendment filed on 08/13/09. Claims 1 , 
8-10, 12, 14-17, 19, 21 and 26 have been amended. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1-3, 5, 7-10, 12, 14-17, 19 and 21 
have been considered but are moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-3, 5, 7-10, 12, 14-17, 19 and 21 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Kilkkila (US 6,854,060) in view of Burke et al. ("Simulation In A 
Distributed Mobile Switching Center Environment") and Garg et al. (US 7,434,257). 
Kilkkila discloses a method for dynamically modifying an access right profile including a 
set of user authorized resources in a telephone switching system (Abstract). 

5. Regarding claims 1 , 8 and 15, Kilkkila specifically discloses a method for 
restricting access to a set of resources comprising: 

determining a set of authorized resources for which a user is authorized to 
access, i.e., determining access right profile for a user in a phone switching system (fig. 
2, step 20; col. 2, lines 22-27); 
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obtaining state information about the set of authorized resources, i.e., obtaining 
information about the phone switching system and its resources, e.g., time of day and 
number of users, system utilization rate, network utilization rate, etc. (col. 2, lines 29- 

50); 

evaluating availability of the set of authorized resources by comparing the state 
information about the set of authorized resources against a configurable rule associated 
with one or more resources in the set of authorized resources, i.e., comparing the 
obtained state information against a condition/limit/threshold specified in a rule in the 
access right profile, and determining if there is a need to modify the set of authorized 
resources, e.g., when there are more users at day time, when the system utilization rate 
exceeds a threshold, when an alarm situation arises, when user's session duration, 
number of operations used/sessions held exceed a limit, etc. (fig. 2, steps 21-24; col. 4, 
lines 20-62); 

in response to evaluating availability of the set of authorized resources using the 
configurable rule, generating a list of a set of entitled resources for the user, wherein the 
set of entitled resources is a subset of the set of authorized resources, i.e., modifying 
the access right profile such that less access rights are authorized (fig. 2, step 25; col. 
2, lines 9-15; col. 4, lines 20-62); 

preventing the user from accessing resources that are in the set of authorized 
resources but that are not in the set of entitled resources, i.e., allowing the user to 
access only resources in the set of entitled resources (col. 4, lines 20-62). 
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Kilkkila does not disclose utilizing the phone switching system in a distributed 
environment. Burk discloses utilizing phone switching systems in a distributed 
environment (Abstract). It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to utilize the phone switching system in a distributed 
environment, as taught by Burk. Distributed systems have the potential to permit 
growth many times the size of an individual unit within that system. 

Kilkkila discloses performing the method for all users such that the access right 
profiles of all users are modified in response to a predetermined situation occurring in 
the system (e.g., time of day) regardless of whether any user requests to access the 
system or not. Kilkkila does not disclose performing the method on an individual basis 
such that only the access right profiles of those who request to access the resource(s) 
are modified. Garg also discloses a method for providing dynamic authorization 
according to dynamic factor such as time of day wherein a user access right profile (i.e., 
client context) is modified only when the corresponding user requests to access a 
resource(s) (Abstract; fig. 5A, steps 515-540 and corresponding text). It would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
modify Kilkkila's method such that it is performed on an individual basis and in response 
to receiving a user's request to access a resource, as taught by Garg, so that only the 
access right profiles of those who requested to access the resource(s) would be 
modified. 
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6. Regarding claims 2, 9, and 16, Kilkkila further discloses sending an indication of 
the set of entitled resources to the user, i.e., requests to access resources not in the set 
of entitled resources are not authorized (col. 4, lines 20-62). 

7. Regarding claims 3, 10 and 17, Kilkkila further discloses responding to requests 
for the user to access the set of entitled resources (col. 4, lines 20-62). 

8. Regarding claims 5, 12 and 19, Kilkkila further discloses considering user 
attributes of the user while evaluating availability of the set of authorized resources (col. 
2, lines 22-37). 

9. Regarding claims 7, 14 and 21, Kilkkila discloses gathering state information 
using a monitoring application. Kilkkila does not disclose gathering state information 
using a distributed monitoring application; however, it would have been obvious by the 
combination of using Kilkkila's switching system in Burk's distributed environment to use 
a distributed monitoring application for gathering state information. 

10. Claims 22-27 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kilkkila in view of Burke as applied to claims 1 , 8 and 15 above, and further in view of 
Grainger (US 2002/0161733). 

Regarding claims 22, 24 and 26, Kilkkila does not disclose providing the user 
with a web page including only URI for resources that the user can access. Grainger 
discloses providing a user with a web page (i.e., a home page) including only URI for 
resources that the user can access (par. 0053-0054). It would have been obvious to 
one of ordinary skill in the art at the time the invention was made to modify the 
combined method of Kilkkila and Burke to provide the user with a web page including 
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only URI for resources that the user can access, as taught by Grainger. The motivation 
for doing so would have been to let the user know what can or cannot be accessed. 

Regarding claims 23, 25 and 27, Kilkkila does not disclose providing users with 
access to different resources according to their status. Grainger discloses disclose 
providing users with access to different resources according to their status, i.e., roles 
(par. 0052-0054). It would have been obvious to one of ordinary skill in the art at the 
time the invention was made to modify the combined method of Kilkkila and Burke to 
provide users with access to different resources according to their roles, as taught by 
Grainger. An advantage of role-based access control is efficient management of 
access to resources. 

Conclusion 

1 1 . Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See M PEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
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the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MINH DINH whose telephone number is (571)272-3802. 
The examiner can normally be reached on Mon-Fri: 09:00am-5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Minn Dinh/ 

Primary Examiner, Art Unit 2432 
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